PicketLink is an umbrella project for security and identity management for Java Applications. It provides:

• Java EE Application Security
  • Authentication API
  • Authorization and Permission API
  • Session Based Identity
  • Fully Integrated With CDI
• Identity Management
  • Built-in Identity Stores for Databases and LDAP
  • Supports Java EE and Java SE Platform
  • Rich and Extensible API
  • Multi-Tenancy
  • Ideal for Cloud and SaaS applications
• Federation
  • SAML (v2.0 and v1.1)
  • OAuth2
  • XACML v2
  • OpenID
  • WS-Trust based Security Token Server (STS)
• Social Login
  • Facebook Connect
  • Twitter Login
  • Google+ Login
• Mobile Applications Security
• REST Applications Security

Want to learn all about PicketLink ? Look at deep dive sessions part 1 and part 2.

Peter Skopek (@pskopek) works on the PicketLink team at Red Hat and gave a presentation at London JBUG a few days ago. The slides and the video recording are now available:

Lot more information at picketlink.org.